Principal, Privacy & Security Technical Program Manager

APEX Fintech Services•Dallas, TX

6d•Hybrid

About The Position

The Principal Privacy & S ecurity Technical Program Manager is responsible for building and leading an enterprise-wide data protection and privacy program. This role designs, implements, and sustains comprehensive strategies, controls, and processes to safeguard critical information assets, ensure regulatory compliance, and enable secure, responsible use of data across on-premises, cloud, and endpoint environments. You will partner closely with the Data Privacy Officer, Chief Information Security Officer (CISO), and technology leaders to embed privacy-by-design and security-by-design across the enterprise.

Requirements

Bachelor’s degree in computer science, Information Security, or a related field (or equivalent experience) required
10+ years of progressive experience in data protection, privacy, or security leadership
5+ years of experience years in leadership roles preferred
Direct experience securing data across multi-national environments with geo-specific regulations
Proven leadership experience in data security, privacy governance, or information risk management.
Industry experience in financial services, or other highly regulated environments preferred
Demonstrated ability to influence and shape organizational policies at senior levels.
Strong collaboration and partnership skills across diverse stakeholders.
Experience with NIST 800-53 r5, NIST-P, or Reg S-P preferred.
Relevant certifications such as CIPP, CIPM, CISSP, or CISM preferred.
Excellent communication and stakeholder engagement capabilities.

Responsibilities

Develop & Lead Strategy: Define and execute the Enterprise Data Protection Strategy in partnership with the DPO, CISO, and key technology and business leaders.
Build a Scalable Practice: Launch and scale a Data Privacy & Protection practice that covers discovery, classification, tagging, loss prevention, encryption , and compliance with evolving regulations .
Data Discovery and Lifecycle Governance: Oversee data discovery, categorization, and classification initiatives to ensure all data is identified , appropriately categorized, and secured based on sensitivity and compliance requirements.
Operationalize Controls: Establish and oversee implementation of enterprise policies, standards, technical controls, ongoing operational governance and KPIs to protect sensitive data across on-prem, cloud, SaaS, and endpoint environments.
Establish Inventory & Classification Frameworks: Develop and maintain a comprehensive inventory of data assets, implementing risk-aligned classification and protection controls.
Champion and E mbed Privacy & Security: Advocate and integrate privacy-by-design and security-by-design principles into product development, technology initiatives, and enterprise processes.
Conduct Data Flow Analysis to track how data moves across systems, ensuring security policies are enforced throughout its lifecycle.
Implement Data Labeling and Data Masking strategies to protect sensitive information, ensuring compliance with data protection laws (e.g., GDPR).
Foster strong cross-functional partnerships with Engineering, Product, Data/Analytics, Legal, Compliance, Risk, Operations and InfoSec teams .
Drive a culture of accountability, privacy awareness, and secure-by-default behaviors through training, communication, and ongoing guidance.

Benefits

We offer a robust package of employee perks and benefits, including healthcare benefits (medical, dental and vision, EAP), competitive PTO, 401k match, parental leave, and HSA contribution match.
We also provide our employees with a paid subscription to the Calm app and offer generous external learning and tuition reimbursement benefits.
At AFS, we offer a hybrid work schedule for most roles that allows employees to have the flexibility of working from home and one of our primary offices.

Stand Out From the Crowd

Upload your resume and get instant feedback on how well it matches this job.

Upload and Match Resume